Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          6ijO507+sZ2ZrTQwqf6pSQ5IHJAfvoS1SWDnC9yuqOc=
Subject key identifier:   E0:98:F6:AA:6D:BD:FB:21:BB:F3:F9:4F:41:32:EE:F3:55:7B:DF:66
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       07446CB052BAA67D64988561FB7697EC0BF7B320
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Thu 04 Apr 2024 07:48:34 +0000
ROA not before:           Thu 04 Apr 2024 07:43:34 +0000
ROA not after:            Thu 03 Apr 2025 07:48:34 +0000
asID:                     262354
IP address blocks:        2804:828:c130::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:44:6c:b0:52:ba:a6:7d:64:98:85:61:fb:76:97:ec:0b:f7:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Apr  4 07:43:34 2024 GMT
            Not After : Apr  3 07:48:34 2025 GMT
        Subject: CN=E098F6AA6DBDFB21BBF3F94F4132EEF3557BDF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:30:4e:92:ab:cf:0f:66:77:be:f8:84:2c:
                    2b:08:58:0c:02:ad:49:90:b6:10:52:9c:00:29:5e:
                    5c:72:78:04:a2:a3:26:b0:39:92:af:ca:d4:59:4b:
                    79:52:a1:0c:5c:c4:4f:97:40:eb:94:05:39:ca:a8:
                    78:55:aa:48:5e:77:04:b4:3e:5d:e7:f2:2d:52:60:
                    db:e0:c2:f6:66:bc:57:89:ac:42:d5:eb:bc:d0:ed:
                    8f:57:fd:e3:99:9b:8a:01:9e:2c:a9:50:04:af:0d:
                    27:90:c6:d8:95:9c:36:75:14:b0:97:44:77:e4:42:
                    24:32:fc:7b:dd:5a:00:c1:a7:a0:35:0c:11:ed:60:
                    44:bb:a3:fa:e9:2e:26:57:85:d1:31:09:cf:b9:22:
                    35:3d:6f:5f:4a:eb:fb:be:82:4e:6d:0c:ea:3c:50:
                    68:84:a0:19:94:26:c3:e2:7a:35:8a:24:ef:ad:c8:
                    88:57:b0:99:b2:63:fc:0a:22:c7:21:9d:c8:8a:7a:
                    d5:c2:70:e9:9f:d9:cd:19:37:e9:a1:c3:24:db:4f:
                    ff:30:2f:85:29:e5:4d:c8:16:cd:2f:ff:25:6a:c9:
                    9e:eb:3e:91:bb:cc:fb:34:7d:14:c4:ec:dd:11:15:
                    77:90:3b:0c:dd:32:12:3e:78:77:53:e2:9a:61:36:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:98:F6:AA:6D:BD:FB:21:BB:F3:F9:4F:41:32:EE:F3:55:7B:DF:66
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a633133303a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:c130::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:de:4d:58:4a:b3:6d:61:27:a1:cd:e7:f5:cb:d4:7a:fc:
         ad:7c:80:54:ab:96:16:94:da:67:cf:37:18:ec:3d:98:cc:02:
         62:e3:f4:0f:d3:14:de:f7:c9:73:ef:42:a7:5c:86:ed:a6:fc:
         25:a4:f7:9c:79:c3:c0:3b:de:00:79:5d:8e:33:c6:98:dd:2b:
         5d:29:71:c5:14:19:da:0b:0f:39:40:6a:0d:7b:29:d8:67:cc:
         cb:10:07:52:5d:b5:ed:35:23:83:93:8f:a5:e0:4c:2c:cf:40:
         33:8d:04:4d:cf:56:d1:57:6b:ce:81:ad:aa:e2:f1:a3:74:41:
         ae:ba:57:dc:11:b9:ff:39:86:a8:a9:41:38:d1:aa:f7:a4:2b:
         d3:2d:29:b1:d2:be:49:d3:13:40:6b:7a:92:ba:2b:ec:c5:5f:
         79:9b:d1:e9:16:a5:eb:65:7b:ae:18:9e:72:5a:16:8d:14:c8:
         f5:31:27:3c:ad:7d:a6:db:e8:4b:b8:69:f0:9b:77:e4:60:a8:
         44:df:e1:63:db:e4:fd:94:f6:af:2a:89:ed:cd:b4:9b:81:1c:
         4f:e0:98:38:70:12:5f:06:46:66:94:78:e3:30:a8:70:8a:99:
         53:15:52:8f:f3:04:c4:eb:cc:05:7e:13:68:92:38:74:79:e4:
         57:4c:66:7d
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUB0RssFK6pn1kmIVh+3aX7Av3syAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE3QUFDMUUwRDdCNkQ5MjY2MkYxMDMzMTZENUQ0RTY3
MDMzQjlGNzAeFw0yNDA0MDQwNzQzMzRaFw0yNTA0MDMwNzQ4MzRaMDMxMTAvBgNV
BAMTKEUwOThGNkFBNkRCREZCMjFCQkYzRjk0RjQxMzJFRUYzNTU3QkRGNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87TBOkqvPD2Z3vviELCsIWAwC
rUmQthBSnAApXlxyeASioyawOZKvytRZS3lSoQxcxE+XQOuUBTnKqHhVqkhedwS0
Pl3n8i1SYNvgwvZmvFeJrELV67zQ7Y9X/eOZm4oBniypUASvDSeQxtiVnDZ1FLCX
RHfkQiQy/HvdWgDBp6A1DBHtYES7o/rpLiZXhdExCc+5IjU9b19K6/u+gk5tDOo8
UGiEoBmUJsPiejWKJO+tyIhXsJmyY/wKIschnciKetXCcOmf2c0ZN+mhwyTbT/8w
L4Up5U3IFs0v/yVqyZ7rPpG7zPs0fRTE7N0RFXeQOwzdMhI+eHdT4pphNrzbAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU4Jj2qm29+yG78/lPQTLu81V732YwHwYDVR0j
BBgwFoAUIXqsHg17bZJmLxAzFtXU5nAzufcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMS8yMTdBQUMxRTBEN0I2RDkyNjYyRjEwMzMxNkQ1RDRFNjcwMzNCOUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxN0FBQzFFMEQ3QjZEOTI2
NjJGMTAzMzE2RDVENEU2NzAzM0I5RjcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzEv
MzIzODMwMzQzYTM4MzIzODNhNjMzMTMzMzAzYTNhMmYzNDM3MmQzNDM3MjAzZDNl
MjAzMjM2MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEoBAgowTAwDQYJKoZIhvcNAQELBQAD
ggEBAILd3k1YSrNtYSehzef1y9R6/K18gFSrlhaU2mfPNxjsPZjMAmLj9A/TFN73
yXPvQqdchu2m/CWk95x5w8A73gB5XY4zxpjdK10pccUUGdoLDzlAag17KdhnzMsQ
B1Jdte01I4OTj6XgTCzPQDONBE3PVtFXa86Brari8aN0Qa66V9wRuf85hqipQTjR
qvekK9MtKbHSvknTE0BrepK6K+zFX3mb0ekWpetle64YnnJaFo0UyPUxJzytfabb
6Eu4afCbd+RgqETf4WPb5P2U9q8qie3NtJuBHE/gmDhwEl8GRmaUeOMwqHCKmVMV
Uo/zBMTrzAV+E2iSOHR55FdMZn0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org